1
00:00:00,000 --> 00:00:00,960
In this lesson,

2
00:00:00,960 --> 00:00:03,960
we're going to cover Bluetooth vulnerabilities and attacks.

3
00:00:03,960 --> 00:00:06,570
Now, Bluetooth is a wireless technology standard used

4
00:00:06,570 --> 00:00:09,000
for exchanging data between fixed and mobile devices

5
00:00:09,000 --> 00:00:10,920
over short distances without the need

6
00:00:10,920 --> 00:00:12,390
for an Internet connection.

7
00:00:12,390 --> 00:00:14,970
We often use Bluetooth to connect external hardware

8
00:00:14,970 --> 00:00:17,100
to our smartphones, tablets, and automobiles,

9
00:00:17,100 --> 00:00:18,840
as well as other devices.

10
00:00:18,840 --> 00:00:20,310
Now, Bluetooth is one of the main types

11
00:00:20,310 --> 00:00:22,950
of wireless connectivity that we use on a daily basis,

12
00:00:22,950 --> 00:00:25,050
so it's pretty important that we understand the variety

13
00:00:25,050 --> 00:00:27,000
of security challenges that need to be addressed

14
00:00:27,000 --> 00:00:29,490
and mitigated to ensure our devices remain secure

15
00:00:29,490 --> 00:00:31,890
when we're using Bluetooth for connectivity.

16
00:00:31,890 --> 00:00:32,910
So, let's take a look

17
00:00:32,910 --> 00:00:34,980
at the vulnerabilities associated with Bluetooth,

18
00:00:34,980 --> 00:00:36,810
some common types of Bluetooth attacks,

19
00:00:36,810 --> 00:00:38,850
and some best practices that you should follow

20
00:00:38,850 --> 00:00:41,550
to securely use Bluetooth with your devices.

21
00:00:41,550 --> 00:00:43,950
First, let's talk about the vulnerabilities associated

22
00:00:43,950 --> 00:00:45,030
with Bluetooth.

23
00:00:45,030 --> 00:00:47,340
Bluetooth allows for the wireless transmission of data

24
00:00:47,340 --> 00:00:50,010
between two devices over short distances.

25
00:00:50,010 --> 00:00:52,890
This technology allows us to seamlessly exchange data,

26
00:00:52,890 --> 00:00:55,200
but it also comes with its share of vulnerabilities,

27
00:00:55,200 --> 00:00:57,630
including insecure pairing, device spoofing,

28
00:00:57,630 --> 00:00:59,280
and on-path attacks.

29
00:00:59,280 --> 00:01:00,960
Insecure device pairing occurs

30
00:01:00,960 --> 00:01:02,940
when Bluetooth devices establish a connection

31
00:01:02,940 --> 00:01:04,590
without proper authentication

32
00:01:04,590 --> 00:01:07,080
or they employ weak authentication methods,

33
00:01:07,080 --> 00:01:08,130
which can leave them vulnerable

34
00:01:08,130 --> 00:01:10,620
to unauthorized access or interference.

35
00:01:10,620 --> 00:01:11,460
This usually occurs

36
00:01:11,460 --> 00:01:13,680
because some Bluetooth devices do not require

37
00:01:13,680 --> 00:01:15,120
any authentication at all

38
00:01:15,120 --> 00:01:17,940
and others still will employ weaker authentication methods

39
00:01:17,940 --> 00:01:19,290
during the pairing process

40
00:01:19,290 --> 00:01:20,400
that would make them susceptible

41
00:01:20,400 --> 00:01:22,770
to unauthorized access or attacks.

42
00:01:22,770 --> 00:01:25,410
Device spoofing is another issue that must be considered

43
00:01:25,410 --> 00:01:26,820
because an attacker can impersonate

44
00:01:26,820 --> 00:01:28,320
a legitimate Bluetooth device

45
00:01:28,320 --> 00:01:30,330
by mimicking its address and device name

46
00:01:30,330 --> 00:01:33,420
to deceive a user into connecting to a malicious device.

47
00:01:33,420 --> 00:01:35,310
An on-path attack is another issue

48
00:01:35,310 --> 00:01:36,960
that can occur with Bluetooth connections,

49
00:01:36,960 --> 00:01:38,370
and this exploits a vulnerability

50
00:01:38,370 --> 00:01:40,380
in the Bluetooth communications protocol

51
00:01:40,380 --> 00:01:41,880
so that the attacker can intercept

52
00:01:41,880 --> 00:01:43,230
and alter the communication

53
00:01:43,230 --> 00:01:44,790
between two Bluetooth devices

54
00:01:44,790 --> 00:01:46,230
without either party being aware

55
00:01:46,230 --> 00:01:48,390
that their communications were being eavesdropped on

56
00:01:48,390 --> 00:01:49,710
or modified.

57
00:01:49,710 --> 00:01:51,300
Second, let's explore a few

58
00:01:51,300 --> 00:01:52,800
of the specific Bluetooth attacks

59
00:01:52,800 --> 00:01:54,990
that you may come across in the real world.

60
00:01:54,990 --> 00:01:57,030
Now, a Bluetooth attack tends to be pretty easy

61
00:01:57,030 --> 00:01:58,680
to recognize based on its name

62
00:01:58,680 --> 00:02:01,140
because most of them are going to be called blue something,

63
00:02:01,140 --> 00:02:04,082
such as the Bluejacking, Bluesnarfing, Bluebugging,

64
00:02:04,082 --> 00:02:06,420
Bluesmack, and Blueborne attacks.

65
00:02:06,420 --> 00:02:07,980
Now, with a Bluejacking attack,

66
00:02:07,980 --> 00:02:10,080
an attacker is going to send unsolicited messages

67
00:02:10,080 --> 00:02:11,730
to a Bluetooth-enabled device,

68
00:02:11,730 --> 00:02:12,630
often as a prank

69
00:02:12,630 --> 00:02:14,670
or to test the vulnerability of the device

70
00:02:14,670 --> 00:02:17,070
without causing any kind of serious harm.

71
00:02:17,070 --> 00:02:19,860
Now, Bluesnarfing attack involves the unauthorized access

72
00:02:19,860 --> 00:02:21,750
to a device through its Bluetooth connection

73
00:02:21,750 --> 00:02:24,150
to steal information like contacts, call logs,

74
00:02:24,150 --> 00:02:25,710
and text messages.

75
00:02:25,710 --> 00:02:28,410
Bluebugging will take Bluesnarfing a step further

76
00:02:28,410 --> 00:02:29,790
by allowing attackers to take control

77
00:02:29,790 --> 00:02:31,410
of a device's Bluetooth functions

78
00:02:31,410 --> 00:02:33,510
and potentially use the device to make calls,

79
00:02:33,510 --> 00:02:36,390
send text messages, or access the Internet.

80
00:02:36,390 --> 00:02:39,120
A Bluesmack attack is a Bluetooth type of attack

81
00:02:39,120 --> 00:02:40,980
that focuses on a denial of service,

82
00:02:40,980 --> 00:02:42,660
where an attacker overwhelms a device

83
00:02:42,660 --> 00:02:43,950
by sending a large amount of data

84
00:02:43,950 --> 00:02:46,650
to cause it to crash or become unresponsive.

85
00:02:46,650 --> 00:02:48,960
And a Blueborne attack is going to target devices

86
00:02:48,960 --> 00:02:51,000
via Bluetooth, and it can spread through the air

87
00:02:51,000 --> 00:02:53,790
to potentially infect numerous devices within seconds

88
00:02:53,790 --> 00:02:56,430
without requiring any intervention from the user.

89
00:02:56,430 --> 00:02:58,770
Now, third, we need to discuss the best practices

90
00:02:58,770 --> 00:03:01,020
that you should follow to securely use Bluetooth

91
00:03:01,020 --> 00:03:02,280
with your devices.

92
00:03:02,280 --> 00:03:04,740
These best practices include turning off Bluetooth

93
00:03:04,740 --> 00:03:05,730
when not in use,

94
00:03:05,730 --> 00:03:07,110
ensuring that your devices are set

95
00:03:07,110 --> 00:03:09,030
to non-discoverable mode by default,

96
00:03:09,030 --> 00:03:11,130
regularly updating your devices to the latest firmware

97
00:03:11,130 --> 00:03:13,050
to address any known vulnerabilities,

98
00:03:13,050 --> 00:03:15,360
only pairing with known and trusted devices,

99
00:03:15,360 --> 00:03:18,000
always being cautious of unsolicited connection requests,

100
00:03:18,000 --> 00:03:20,940
and using encryption for your sensitive data transfers.

101
00:03:20,940 --> 00:03:23,430
Now, your device's Bluetooth connection should be disabled

102
00:03:23,430 --> 00:03:26,160
or turned off when it's not actively being used.

103
00:03:26,160 --> 00:03:28,410
By switching off Bluetooth when it's not being used,

104
00:03:28,410 --> 00:03:30,630
you're going to be able to reduce the potential attack surface

105
00:03:30,630 --> 00:03:33,180
and minimize your exposure to those threats.

106
00:03:33,180 --> 00:03:34,380
You should also set your devices

107
00:03:34,380 --> 00:03:36,330
to non-discoverable by default.

108
00:03:36,330 --> 00:03:37,800
In Bluetooth terminology,

109
00:03:37,800 --> 00:03:39,810
being discoverable refers to a mode

110
00:03:39,810 --> 00:03:41,670
in which a Bluetooth device is visible

111
00:03:41,670 --> 00:03:44,160
and can be found by other Bluetooth devices that are nearby

112
00:03:44,160 --> 00:03:47,040
and allows them to initiate a connection or pairing request.

113
00:03:47,040 --> 00:03:48,960
By setting your device to non-discoverable,

114
00:03:48,960 --> 00:03:50,610
you can prevent your device from being visible

115
00:03:50,610 --> 00:03:52,770
to other unknown devices and reduce the risk

116
00:03:52,770 --> 00:03:55,440
of any unsolicited connection attempts being made.

117
00:03:55,440 --> 00:03:58,050
Another best practice is to regularly update your devices

118
00:03:58,050 --> 00:04:00,060
to the latest version of its firmware.

119
00:04:00,060 --> 00:04:02,100
Firmware updates often contain patches

120
00:04:02,100 --> 00:04:03,330
for known vulnerabilities,

121
00:04:03,330 --> 00:04:05,040
so updating your firmware will ensure

122
00:04:05,040 --> 00:04:08,220
that your device's security remains current and up to date.

123
00:04:08,220 --> 00:04:10,350
When you're pairing your device with other devices,

124
00:04:10,350 --> 00:04:12,180
you should only allow pairing and connections

125
00:04:12,180 --> 00:04:14,370
between known and trusted devices.

126
00:04:14,370 --> 00:04:16,500
This practice will ensure that you're only connecting

127
00:04:16,500 --> 00:04:18,839
to legitimate devices and not malicious ones

128
00:04:18,839 --> 00:04:20,459
that are trying to exploit a vulnerability

129
00:04:20,459 --> 00:04:22,980
in your device's Bluetooth capabilities.

130
00:04:22,980 --> 00:04:24,330
When you're pairing your device,

131
00:04:24,330 --> 00:04:26,160
you're also going to be asked to authenticate your device

132
00:04:26,160 --> 00:04:28,170
by using a PIN or a passkey.

133
00:04:28,170 --> 00:04:30,060
To best protect your Bluetooth devices,

134
00:04:30,060 --> 00:04:32,280
you should always use your unique PIN or passkey

135
00:04:32,280 --> 00:04:33,600
during the pairing process

136
00:04:33,600 --> 00:04:35,250
because this adds a layer of security

137
00:04:35,250 --> 00:04:36,390
during that pairing process

138
00:04:36,390 --> 00:04:38,880
to ensure that unauthorized devices cannot easily connect

139
00:04:38,880 --> 00:04:40,080
to your device.

140
00:04:40,080 --> 00:04:42,570
Another best practice is to always remain cautious

141
00:04:42,570 --> 00:04:44,580
of unsolicited connection requests.

142
00:04:44,580 --> 00:04:47,250
Unexpected or unsolicited requests can be indicative

143
00:04:47,250 --> 00:04:48,480
of a malicious intent,

144
00:04:48,480 --> 00:04:49,680
so it's essential to be wary

145
00:04:49,680 --> 00:04:52,050
and avoid attempting such requests blindly.

146
00:04:52,050 --> 00:04:54,300
For example, I recently was on an airplane

147
00:04:54,300 --> 00:04:56,760
and different users kept trying to connect to my smartphone

148
00:04:56,760 --> 00:04:58,020
using my Bluetooth connection

149
00:04:58,020 --> 00:05:00,840
in order to AirDrop pictures or memes onto my phone.

150
00:05:00,840 --> 00:05:03,210
But these images could have actually contained malware

151
00:05:03,210 --> 00:05:04,260
embedded within them,

152
00:05:04,260 --> 00:05:05,093
so it's a good idea

153
00:05:05,093 --> 00:05:07,260
to never accept unsolicited connection requests

154
00:05:07,260 --> 00:05:09,030
or files over Bluetooth.

155
00:05:09,030 --> 00:05:10,320
Finally, you should rely

156
00:05:10,320 --> 00:05:11,970
on encryption anytime you want to send

157
00:05:11,970 --> 00:05:13,650
or receive sensitive data.

158
00:05:13,650 --> 00:05:16,170
This encryption is going to scramble the data being transferred

159
00:05:16,170 --> 00:05:17,580
over the Bluetooth connection

160
00:05:17,580 --> 00:05:19,530
to ensure that even if it is intercepted,

161
00:05:19,530 --> 00:05:21,930
that data that's being transferred would remain unreadable

162
00:05:21,930 --> 00:05:23,520
to any unauthorized parties

163
00:05:23,520 --> 00:05:26,250
who are eavesdropping in on our Bluetooth connections.

164
00:05:26,250 --> 00:05:28,770
So remember, Bluetooth allows for the wireless transmission

165
00:05:28,770 --> 00:05:31,860
of data between two devices over short distances.

166
00:05:31,860 --> 00:05:34,830
This technology allows us to seamlessly exchange data,

167
00:05:34,830 --> 00:05:36,930
but it also comes with its share of vulnerabilities,

168
00:05:36,930 --> 00:05:39,210
including insecure pairing, device spoofing,

169
00:05:39,210 --> 00:05:40,770
and on-path attacks.

170
00:05:40,770 --> 00:05:42,660
Insecure device pairing is going to occur

171
00:05:42,660 --> 00:05:44,790
when Bluetooth devices establish a connection

172
00:05:44,790 --> 00:05:46,200
without proper authentication

173
00:05:46,200 --> 00:05:48,600
or they employ weak authentication methods,

174
00:05:48,600 --> 00:05:49,710
which can leave them vulnerable

175
00:05:49,710 --> 00:05:51,930
to unauthorized access or interference.

176
00:05:51,930 --> 00:05:53,640
There are several different Bluetooth exploits

177
00:05:53,640 --> 00:05:55,830
and attacks used, including Bluejacking,

178
00:05:55,830 --> 00:05:57,453
Bluesnarfing, Bluebugging, Bluesmack,

179
00:05:57,453 --> 00:05:59,610
and Blueborne attacks.

180
00:05:59,610 --> 00:06:01,650
To prevent these attacks from being successful,

181
00:06:01,650 --> 00:06:02,700
you should always implement

182
00:06:02,700 --> 00:06:04,980
some good Bluetooth security best practices,

183
00:06:04,980 --> 00:06:07,320
including turning off Bluetooth when not in use,

184
00:06:07,320 --> 00:06:08,550
ensuring that your devices are set

185
00:06:08,550 --> 00:06:10,440
to non-discoverable mode by default,

186
00:06:10,440 --> 00:06:12,720
regularly updating your devices to the latest firmware

187
00:06:12,720 --> 00:06:14,700
to address any known vulnerabilities,

188
00:06:14,700 --> 00:06:16,950
only pairing with known and trusted devices,

189
00:06:16,950 --> 00:06:18,750
always using unique PINs or passkeys

190
00:06:18,750 --> 00:06:20,160
during the pairing process,

191
00:06:20,160 --> 00:06:22,950
always being cautious of unsolicited connection requests,

192
00:06:22,950 --> 00:06:25,680
and using encryption for sensitive data transfers.

193
00:06:25,680 --> 00:06:27,660
By staying informed about potential attacks,

194
00:06:27,660 --> 00:06:29,280
practicing safe connection habits,

195
00:06:29,280 --> 00:06:30,600
and keeping your devices updated

196
00:06:30,600 --> 00:06:32,190
with the latest security patches,

197
00:06:32,190 --> 00:06:34,530
your users are going to be able to enjoy all the benefits

198
00:06:34,530 --> 00:06:35,790
of Bluetooth connectivity

199
00:06:35,790 --> 00:06:37,500
while minimizing the risk associated

200
00:06:37,500 --> 00:06:40,533
with using a wireless connectivity protocol like Bluetooth.